Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/PlXZBxePjNs7rXP7f-xnm9I_jtI.roa
File: PlXZBxePjNs7rXP7f-xnm9I_jtI.roa (raw, json)
Hash identifier: LkNdvT568Pgtm5LJyvHNwOTvhH9Y5xQwHGUkP1vvQBQ=
Subject key identifier: 3E:55:D9:07:17:8F:8C:DB:3B:AD:73:FB:7F:EC:67:9B:D2:3F:8E:D2
Certificate issuer: /CN=3780e7868fbb2617175062a5e7b9e1c049cbdf74
Certificate serial: 018CC4933F4DB820A573FE811EAA931863E7
Authority key identifier: 37:80:E7:86:8F:BB:26:17:17:50:62:A5:E7:B9:E1:C0:49:CB:DF:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4Dnho-7JhcXUGKl57nhwEnL33Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/PlXZBxePjNs7rXP7f-xnm9I_jtI.roa
Signing time: Mon 01 Jan 2024 10:30:33 +0000
ROA not before: Mon 01 Jan 2024 10:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207744
IP address blocks: 188.190.192.0/19 maxlen: 19
188.190.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 15:07:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:3f:4d:b8:20:a5:73:fe:81:1e:aa:93:18:63:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3780e7868fbb2617175062a5e7b9e1c049cbdf74
Validity
Not Before: Jan 1 10:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e55d907178f8cdb3bad73fb7fec679bd23f8ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9f:d9:98:13:46:5e:43:8b:e6:77:63:8b:07:
3b:0c:99:1f:2c:fe:45:68:2b:ed:aa:7c:05:01:28:
ed:04:b4:d0:fb:60:3d:08:56:8f:b7:53:6d:59:83:
4c:2b:eb:7f:67:d2:03:36:d1:af:7d:27:ba:86:63:
64:d7:f4:4d:87:6a:ab:5d:b1:f6:c5:19:92:e6:d1:
ce:bd:a3:9b:96:cd:25:5d:6f:d6:a8:2c:c8:39:08:
94:5a:21:25:22:14:06:10:ae:c7:9e:e0:eb:f9:6e:
7c:eb:2a:06:9e:42:39:b1:00:e5:d8:51:07:80:7c:
54:42:8b:a9:ed:4f:b5:67:38:fa:cb:57:14:52:57:
9c:22:c9:3e:25:c2:93:0c:c7:fe:90:25:63:88:76:
86:48:dc:d7:60:28:d7:7e:48:95:8f:e5:0c:2a:e0:
2c:4b:c4:5f:de:c9:81:19:6f:dd:7b:17:d3:99:98:
be:90:35:17:29:32:fe:7c:1a:0b:97:62:73:33:db:
e0:03:e1:5e:a3:9c:23:1a:a4:90:f2:82:53:7d:2c:
e1:6e:f0:32:c7:4e:2c:4b:b0:2d:2c:7f:95:06:62:
a8:a7:9d:f8:95:63:25:5c:b7:ee:3c:cf:7a:26:d5:
ff:fa:37:29:8b:ab:83:20:e4:4e:85:33:51:87:8f:
13:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:55:D9:07:17:8F:8C:DB:3B:AD:73:FB:7F:EC:67:9B:D2:3F:8E:D2
X509v3 Authority Key Identifier:
keyid:37:80:E7:86:8F:BB:26:17:17:50:62:A5:E7:B9:E1:C0:49:CB:DF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4Dnho-7JhcXUGKl57nhwEnL33Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/PlXZBxePjNs7rXP7f-xnm9I_jtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/N4Dnho-7JhcXUGKl57nhwEnL33Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.190.192.0/19
Signature Algorithm: sha256WithRSAEncryption
4c:91:1e:01:72:c9:0e:1f:9c:bc:15:48:5b:ea:7d:f9:dc:57:
39:65:af:b1:d5:cd:10:64:c8:c0:c5:1d:82:88:1a:7b:f7:75:
d5:5f:11:4d:0e:06:81:52:22:7d:91:e2:cb:98:e9:c6:4c:8e:
15:8b:8b:3c:26:b6:df:30:f5:72:c2:86:3f:dc:4f:f5:57:16:
da:ee:dd:cd:35:07:a0:7b:5b:dc:b4:e4:57:0b:20:9c:33:e8:
df:fa:8d:0b:2f:57:81:48:f8:49:22:57:94:11:b8:3c:9d:8d:
d7:71:f1:33:e4:7c:73:c1:21:72:6b:15:87:4e:de:ba:0e:80:
03:3c:48:d6:8f:50:71:9e:a7:8a:30:32:44:4a:fc:41:fe:89:
c2:29:a0:c3:a4:d7:2d:fa:6b:bb:72:12:8d:8d:dc:e9:27:57:
9e:fa:cd:fb:b6:9c:b2:ec:df:37:67:7e:5d:13:42:1f:d4:2f:
fc:b9:0b:12:93:02:25:94:71:a2:5b:62:e6:6b:33:0c:82:ee:
4d:85:7c:2d:de:37:1a:f5:ff:2a:73:80:fc:ae:7a:9a:43:46:
38:2d:c7:85:98:e3:21:80:73:c1:45:9a:01:39:94:0b:ef:98:
8e:2c:38:0c:97:90:cd:88:aa:5b:a6:32:b1:f0:56:cb:45:73:
4d:4d:ea:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:21 2025 by rpki-client